Hive Workshop Data Breach
The Hive Workshop 2016 system compromise and later credential-list discovery have two source layers.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
2- Usernames
- Passwords
About This Breach
An administrator post dated April 21, 2016 says the site had been deleted the previous night, a malicious plug-in and backdoor were found, administrator passwords had been changed, and an exploit in the unmaintained vBSEO add-on was patched. It said the attacker had server and database access and could have copied the database, but copying was not confirmed at that time.
A second administrator post dated July 8, 2019 confirms that a username and password list linked to the 2016 event was circulating and that passwords for around 60,000 accounts were invalidated. A derivative commercial catalogue separately claims 79,026 records, a March 2016 date, and additional email, IP, and hash-type fields. The relationship between the 79,026 rows and roughly 60,000 accounts, the exact date, and the additional fields remain unverified without raw dataset evidence.
No Hive Workshop data is locally searchable. The record does not identify anyone as a Hive Workshop or Warcraft user, mod developer, or forum member; it cannot establish a username/password-list entry, email, IP, project ownership, field co-occurrence, password ownership, or misuse at person level. The derivative 79,026 claim is not local coverage or a unique-person or email count.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
